Skip to content

Missing audit log for admin configuration #1306

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Xan4x opened this issue Apr 2, 2025 · 0 comments
Open

Missing audit log for admin configuration #1306

Xan4x opened this issue Apr 2, 2025 · 0 comments

Comments

@Xan4x
Copy link

Xan4x commented Apr 2, 2025

Hello,

When we create a user or a role for example, we don't have information of what was created in the log.

For example, request of the creation of a user:
` $ curl -k -X 'POST'
'https://127.0.0.1:8888/@warpgate/admin/api/users'
-H 'accept: application/json; charset=utf-8'
-H 'Content-Type: application/json; charset=utf-8'
-H 'X-Warpgate-Token: XXXXX'
-d '{
"username": "test-user"
}'

Answer:
{"credential_policy":{"http":null,"mysql":null,"postgres":null,"ssh":null},"id":"d55f25b5-3b2a-40c3-99e8-1aaabce05c56","username":"test-user"}`

On the log, we only found "Created" with the admin/api/users, so we understand that a user is created

`13:22:13  INFO HTTP: Request method=POST url=https://127.0.0.1:8888/@warpgate/admin/api/users status=201 Created client_ip=172.19.0.1`

But some information is missing:

  • we don't have information of which user or API token used to create this user.
  • we don't have information about the user created : API response is not available

Is it possible to add:

  • on the log, the user name or API-token name used by the API
  • on the warpgate product new kind of logs: "audit logs" with API request/responses for example and and make them available on the warpgate admin page for example?
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant